Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7884bfa2-b35b-39fe-b2b4-8eef53023db3.roa
File: 7884bfa2-b35b-39fe-b2b4-8eef53023db3.roa (raw, json)
Hash identifier: A9aRJmjOQFdbpl9Rr3K0NKjW7laRueeKE4sLBxxsTXc=
Subject key identifier: 5F:0B:1B:8E:B6:87:E7:28:01:39:64:4E:17:C3:57:3D:EC:52:BC:4B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B22FC076D76E5EA2F2C60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7884bfa2-b35b-39fe-b2b4-8eef53023db3.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 40717
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:22:fc:07:6d:76:e5:ea:2f:2c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=57541641-c426-4419-b189-8622afb171de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9a:15:62:8c:8d:31:3a:27:27:d8:f0:d3:11:
b6:61:d2:c6:dc:55:66:ac:3f:90:61:78:f8:be:6f:
0c:d2:a6:c4:24:50:a8:ce:06:c4:a8:8f:ef:fb:f1:
4d:07:13:21:1d:c2:a2:bc:2b:04:7c:a7:fc:ed:75:
97:8d:8f:4d:df:b1:4d:9a:16:f0:66:99:c8:d6:da:
df:47:14:7e:57:fc:bb:49:1d:cd:3b:fb:e4:ea:e5:
48:ce:57:78:4c:13:5b:f2:de:6b:50:0a:a6:4f:64:
1c:a0:cb:32:60:d3:84:7b:dc:5b:ae:3f:19:15:7f:
8e:ef:a3:7c:64:d3:fb:07:09:ab:d0:0d:33:ab:10:
40:c3:be:71:26:cc:8a:c5:75:82:72:7a:69:37:43:
8e:c1:dd:b2:d2:c4:3f:6a:4f:89:0e:ca:73:86:35:
aa:d5:9c:c7:ae:91:51:bd:b8:f5:f5:01:f4:8e:05:
c2:3b:9e:8c:87:58:de:9a:a0:53:fc:ed:59:d6:55:
bf:98:7a:77:85:ae:68:f8:77:e8:18:46:50:6c:92:
f2:81:6c:d0:99:0e:e9:5d:4d:db:93:be:67:b0:2e:
49:67:50:58:52:f2:fd:9c:8a:57:b5:4a:4c:d7:28:
7c:f1:40:6d:b0:aa:fc:cf:63:29:05:e1:1c:20:c5:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0B:1B:8E:B6:87:E7:28:01:39:64:4E:17:C3:57:3D:EC:52:BC:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7884bfa2-b35b-39fe-b2b4-8eef53023db3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:3b:9e:91:55:af:05:61:3b:ba:b3:c7:ab:53:04:dd:0d:53:
30:15:c5:25:c8:8e:ce:f3:4b:6f:b3:90:de:71:f1:b8:a3:24:
36:af:9e:1e:30:6d:cd:07:0b:66:c7:0f:c1:b5:be:aa:50:67:
44:88:ff:86:7f:2d:43:8d:eb:df:b9:5a:13:99:86:74:45:34:
99:3b:c0:6e:52:57:83:8a:df:5e:72:92:63:d2:16:c4:84:a4:
dc:52:63:64:fe:14:e9:62:49:e1:bb:e4:9d:ca:6b:66:27:a9:
ca:c4:56:b5:01:0e:28:19:13:c1:f7:f8:ad:cc:b3:38:74:0f:
0c:e9:4d:9b:21:00:6e:14:0d:d7:21:5a:4a:b6:3b:a1:2a:73:
6c:5c:d5:95:74:41:aa:69:5c:25:d2:aa:a2:a9:b6:b2:8e:fa:
9f:15:0c:07:6a:c5:ad:db:e2:a1:7d:d0:d7:be:08:a2:9f:c2:
f5:45:53:18:06:3d:2e:ce:5f:b4:6e:0d:13:f0:7a:11:b0:44:
29:c9:ce:fe:5c:e1:ef:4b:83:fe:33:68:44:7c:d5:4b:2d:14:
b1:0c:63:89:32:71:5d:ec:9b:15:15:1f:2a:7b:51:9f:3e:2c:
55:b9:50:00:05:51:f6:ae:34:36:f8:cb:b6:86:8c:4d:e7:20:
3c:24:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:58 2025 by rpki-client